Synopsis

Important: krb5 security update

Type/Severity

Security Advisory: Important

Topic

Updated krb5 packages that correct a security flaw are now available for
Red Hat Enterprise Linux 5.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

Description

Kerberos is a network authentication system which allows clients and
servers to authenticate to each other through use of symmetric encryption
and a trusted third party, the KDC. kadmind is the KADM5 administration
server.

The MIT Kerberos Team discovered a problem with the originally published
patch for svc_auth_gss.c (CVE-2007-3999). A remote unauthenticated
attacker who can access kadmind could trigger this flaw and cause kadmind
to crash. On Red Hat Enterprise Linux 5 it is not possible to exploit this
flaw to run arbitrary code as the overflow is blocked by FORTIFY_SOURCE.
(CVE-2007-4743)

This issue did not affect the versions of Kerberos distributed with Red
Hat Enterprise Linux 2.1, 3, or 4.

Users of krb5-server are advised to update to these erratum packages which
contain a corrected backported fix for this issue.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 281561 - CVE-2007-4743 krb5 incomplete fix for CVE-2007-3999

CVEs

• CVE-2007-4743

References

• http://www.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server 5

SRPM
krb5-1.5-29.src.rpm	SHA-256: cdbe62faf81c5ca1bff8cf4264c529c48883c8f0982bdef439335f61653f8b65
x86_64
krb5-devel-1.5-29.i386.rpm	SHA-256: 33444d34bd3e667c0d53ad62282eb3a60e2201d363e0119039550522073f2966
krb5-devel-1.5-29.x86_64.rpm	SHA-256: 4fc61754bfee3555eb743992868623deab4857450e9170afb3e89793c5969468
krb5-libs-1.5-29.i386.rpm	SHA-256: 00e83745e99d01305844d580f567246e26cc44bba3d2c7511070ac9fbc694bcb
krb5-libs-1.5-29.x86_64.rpm	SHA-256: b619613c2010cf1246629ce3f62bead44c7257b71e4228d8d9e1bcdff6b856c4
krb5-server-1.5-29.x86_64.rpm	SHA-256: 419a78141a06e4859bb8bbbe1c24cc9c85b41982539476f941f2ed1b16681e4b
krb5-workstation-1.5-29.x86_64.rpm	SHA-256: e56044ebc9e11d6a6134fd000d63283753ce6d0acb012cb6b08eed2d36aa8af8
ia64
krb5-devel-1.5-29.ia64.rpm	SHA-256: 42ae930b69cffafbc70c121f649442e7bc494dfc2f5f81e04b4aa8c12a1fddf9
krb5-libs-1.5-29.i386.rpm	SHA-256: 00e83745e99d01305844d580f567246e26cc44bba3d2c7511070ac9fbc694bcb
krb5-libs-1.5-29.ia64.rpm	SHA-256: 7d7f8edb80db55073631f3fcc1253e240f637cd8e405bf9cf0fe3f09ef8462cf
krb5-server-1.5-29.ia64.rpm	SHA-256: d873415acd56fced6c7ea16fcb329c16623a1c0b95b5395f3859b2086ecf38fa
krb5-workstation-1.5-29.ia64.rpm	SHA-256: 2f78018a3535d48bf38db123ecbf273cf2ea52306077812f8b9d5d93c832a1c6
i386
krb5-devel-1.5-29.i386.rpm	SHA-256: 33444d34bd3e667c0d53ad62282eb3a60e2201d363e0119039550522073f2966
krb5-libs-1.5-29.i386.rpm	SHA-256: 00e83745e99d01305844d580f567246e26cc44bba3d2c7511070ac9fbc694bcb
krb5-server-1.5-29.i386.rpm	SHA-256: 24f6248fbbd6e21cb356d2c64b40920466dde72da0815d0ef51af37fee98ad30
krb5-workstation-1.5-29.i386.rpm	SHA-256: 23a44e1a265e2d8fd1f67105d6fb7c87da6d69911833446845a7e89ada223de7

Red Hat Enterprise Linux Workstation 5

SRPM
krb5-1.5-29.src.rpm	SHA-256: cdbe62faf81c5ca1bff8cf4264c529c48883c8f0982bdef439335f61653f8b65
x86_64
krb5-devel-1.5-29.i386.rpm	SHA-256: 33444d34bd3e667c0d53ad62282eb3a60e2201d363e0119039550522073f2966
krb5-devel-1.5-29.x86_64.rpm	SHA-256: 4fc61754bfee3555eb743992868623deab4857450e9170afb3e89793c5969468
krb5-libs-1.5-29.i386.rpm	SHA-256: 00e83745e99d01305844d580f567246e26cc44bba3d2c7511070ac9fbc694bcb
krb5-libs-1.5-29.x86_64.rpm	SHA-256: b619613c2010cf1246629ce3f62bead44c7257b71e4228d8d9e1bcdff6b856c4
krb5-server-1.5-29.x86_64.rpm	SHA-256: 419a78141a06e4859bb8bbbe1c24cc9c85b41982539476f941f2ed1b16681e4b
krb5-workstation-1.5-29.x86_64.rpm	SHA-256: e56044ebc9e11d6a6134fd000d63283753ce6d0acb012cb6b08eed2d36aa8af8
i386
krb5-devel-1.5-29.i386.rpm	SHA-256: 33444d34bd3e667c0d53ad62282eb3a60e2201d363e0119039550522073f2966
krb5-libs-1.5-29.i386.rpm	SHA-256: 00e83745e99d01305844d580f567246e26cc44bba3d2c7511070ac9fbc694bcb
krb5-server-1.5-29.i386.rpm	SHA-256: 24f6248fbbd6e21cb356d2c64b40920466dde72da0815d0ef51af37fee98ad30
krb5-workstation-1.5-29.i386.rpm	SHA-256: 23a44e1a265e2d8fd1f67105d6fb7c87da6d69911833446845a7e89ada223de7

Red Hat Enterprise Linux Desktop 5

SRPM
krb5-1.5-29.src.rpm	SHA-256: cdbe62faf81c5ca1bff8cf4264c529c48883c8f0982bdef439335f61653f8b65
x86_64
krb5-libs-1.5-29.i386.rpm	SHA-256: 00e83745e99d01305844d580f567246e26cc44bba3d2c7511070ac9fbc694bcb
krb5-libs-1.5-29.x86_64.rpm	SHA-256: b619613c2010cf1246629ce3f62bead44c7257b71e4228d8d9e1bcdff6b856c4
krb5-workstation-1.5-29.x86_64.rpm	SHA-256: e56044ebc9e11d6a6134fd000d63283753ce6d0acb012cb6b08eed2d36aa8af8
i386
krb5-libs-1.5-29.i386.rpm	SHA-256: 00e83745e99d01305844d580f567246e26cc44bba3d2c7511070ac9fbc694bcb
krb5-workstation-1.5-29.i386.rpm	SHA-256: 23a44e1a265e2d8fd1f67105d6fb7c87da6d69911833446845a7e89ada223de7

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
krb5-1.5-29.src.rpm	SHA-256: cdbe62faf81c5ca1bff8cf4264c529c48883c8f0982bdef439335f61653f8b65
s390x
krb5-devel-1.5-29.s390.rpm	SHA-256: e9a5b8530e64131c5e33623f6e4143bf21a392aca6f706165142f4b89c45c32b
krb5-devel-1.5-29.s390x.rpm	SHA-256: 1d6bffc522d7498e5b013ba41e32156cfde0c9005be7d89c74e4f54b5d281ed3
krb5-libs-1.5-29.s390.rpm	SHA-256: 8a4255cd13050bd5a226719e87238d464ff4151959ef0e590a7beb7d0ab71a4f
krb5-libs-1.5-29.s390x.rpm	SHA-256: cb8d1ee7294713a99d0e4bcada18e64cfb69384c1812d61bbb39463556a59660
krb5-server-1.5-29.s390x.rpm	SHA-256: b4b305225d3fdd9ed6adfb17d1c0e9cb5d7014922ae868989e91147dc667fa0e
krb5-workstation-1.5-29.s390x.rpm	SHA-256: 6514bba4e858e8f98602d6d941c6849acdca7f64f468faf235b76bb0d3e4d6d4

Red Hat Enterprise Linux for Power, big endian 5

SRPM
krb5-1.5-29.src.rpm	SHA-256: cdbe62faf81c5ca1bff8cf4264c529c48883c8f0982bdef439335f61653f8b65
ppc
krb5-devel-1.5-29.ppc.rpm	SHA-256: 1a56106394e5074ce62fa1ed30b72bff78d069a09d56466926adbba0c3f237aa
krb5-devel-1.5-29.ppc64.rpm	SHA-256: d95c3b9629910519f7e53a5ad57f10e0c6a4d1207109ff8d051f6961c4be6458
krb5-libs-1.5-29.ppc.rpm	SHA-256: 45ce51c1db2f0e3bd5bdc2fecf30f7fed14a7421310c97764feac7819ca83154
krb5-libs-1.5-29.ppc64.rpm	SHA-256: 0f062f58a4308de4fdc344a21ef2659f3a99b252f69347d15dc8fc92f7d28e45
krb5-server-1.5-29.ppc.rpm	SHA-256: a0d4a35158ed94dbc5beb60333aa5eb0f32afaaa19b087f7ce04641f16c4bb8f
krb5-workstation-1.5-29.ppc.rpm	SHA-256: b3b69a00c0a862bbb6a5682c654d0d169497dce983606e66ebe2d37e5f6f9dee

Red Hat Enterprise Linux Server from RHUI 5

SRPM
krb5-1.5-29.src.rpm	SHA-256: cdbe62faf81c5ca1bff8cf4264c529c48883c8f0982bdef439335f61653f8b65
x86_64
krb5-devel-1.5-29.i386.rpm	SHA-256: 33444d34bd3e667c0d53ad62282eb3a60e2201d363e0119039550522073f2966
krb5-devel-1.5-29.x86_64.rpm	SHA-256: 4fc61754bfee3555eb743992868623deab4857450e9170afb3e89793c5969468
krb5-libs-1.5-29.i386.rpm	SHA-256: 00e83745e99d01305844d580f567246e26cc44bba3d2c7511070ac9fbc694bcb
krb5-libs-1.5-29.x86_64.rpm	SHA-256: b619613c2010cf1246629ce3f62bead44c7257b71e4228d8d9e1bcdff6b856c4
krb5-server-1.5-29.x86_64.rpm	SHA-256: 419a78141a06e4859bb8bbbe1c24cc9c85b41982539476f941f2ed1b16681e4b
krb5-workstation-1.5-29.x86_64.rpm	SHA-256: e56044ebc9e11d6a6134fd000d63283753ce6d0acb012cb6b08eed2d36aa8af8
i386
krb5-devel-1.5-29.i386.rpm	SHA-256: 33444d34bd3e667c0d53ad62282eb3a60e2201d363e0119039550522073f2966
krb5-libs-1.5-29.i386.rpm	SHA-256: 00e83745e99d01305844d580f567246e26cc44bba3d2c7511070ac9fbc694bcb
krb5-server-1.5-29.i386.rpm	SHA-256: 24f6248fbbd6e21cb356d2c64b40920466dde72da0815d0ef51af37fee98ad30
krb5-workstation-1.5-29.i386.rpm	SHA-256: 23a44e1a265e2d8fd1f67105d6fb7c87da6d69911833446845a7e89ada223de7